CVE-2024-6617 NinjaTeam Header Footer Custom Code <= 1.2 - Admin+ Stored XSS via CSS Styles

The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a lack of checking for FRP status in wifiitemeditcontent in styles.xml. An attacker can exploit this vulnerability to escalate privileg...

PT-2024-28966

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a possible FRP Factory Reset Protection bypass due to a missing check for the FRP state in the wifi item edit content of styles.xml. This could lead to local escalatio...

OESA-2024-1953 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory...

CVE-2024-42010

modcssstyles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets CSS token sequences in rendered e-mail messages, allowing a remote attacker to obtain sensitive information...

PT-2024-5873

Name of the Vulnerable Software and Affected Versions Roundcube versions 1.5.0 through 1.5.7 Roundcube versions 1.6.0 through 1.6.7 Description The issue is related to the mod css styles function in Roundcube, which insufficiently filters Cascading Style Sheets CSS token sequences in rendered...

CVE-2024-42010

The mod_css_styles function in the RoundCube email client (versions through 1.5.7 and 1.6.x through 1.6.7 ) contains a vulnerability due to insufficient filtering of CSS token sequences in rendered email messages. This allows a remote attacker to obtain sensitive information or perform HTML exfil...

CVE-2024-42010

modcssstyles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets CSS token sequences in rendered e-mail messages, allowing a remote attacker to obtain sensitive information...

CVE-2024-6885: Improper Limitation of a Pathname to a Restricted Directory

The MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maxiremovecustomimagesize and maxiaddcustomimagesize functions in all versions up to, and including, 1.9.2. This makes ...

PT-2024-37927

Name of the Vulnerable Software and Affected Versions The MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles plugin for WordPress versions up to, and including, 1.9.2 Description The issue is related to insufficient file path validation in the maxi remove custom image size and maxi a...

PT-2024-37173 · WordPress · Wp2Speed Faster – Optimize Pagespeed Insights Score

Name of the Vulnerable Software and Affected Versions: WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin for WordPress versions up to, and including, 1.0.1 Description: The issue is due to the use of hardcoded credentials to authenticate all incoming API requests. This allows...

Malicious code in pb-styles-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2852 Malicious code in pb-styles-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ccl-styles-2016 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1960 Malicious code in ccl-styles-2016 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malware in colors-styles

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in colors-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77b77addbd8ed20785c5387408e4748eea849b1a038f08b1fb90a7825fe530a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

Mozilla: Use-after-free could occur when printing to PDF

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...

DRUPAL-CONTRIB-2024-023

This module enables you to create responsive image styles that depend on the parent element's width. The module doesn't sufficiently check access to rendered images, resulting in access bypass vulnerabilities in specific scenarios...